Funnel Builder Flaw Under Active Exploitation Enables WooCommerce Checkout Skimming
Unauthenticated attackers can inject malicious JavaScript into WooCommerce checkout pages via Funnel Builder versions before 3.15.0.3 to steal payment data.
Hackers Exploit WordPress Sites to Power Next-Gen ClickFix Phishing Attacks
Attackers inject malicious JavaScript into WordPress theme files to load external scripts that redirect visitors via a traffic-distribution system while mimicking Cloudflare assets.
Funnel Builder Flaw Under Active Exploitation Enables WooCommerce Checkout Skimming
Unauthenticated attackers can inject malicious JavaScript into WooCommerce checkout pages via Funnel Builder versions before 3.15.0.3 to steal payment data.
sao completion values can contain executable JavaScript that runs in sao context, exposing session and sensitive data; upgrade sao to the latest version.
